@open-everywhere/core 0.1.0

package/dist/agent/stall/guard.d.ts

@@ -0,0 +1,68 @@
+import type { ToolDefinition } from "eve/tools";
+/** Default identical-(tool,args,result) run length before the NEXT identical call is
+ *  nudged instead of executed. Deliberately conservative. IS the schema's shipped default
+ *  (`stall.repeatThreshold`) — one source, not two that can drift. */
+export declare const DEFAULT_STALL_THRESHOLD: number;
+/** The configured threshold — the `stall.repeatThreshold` setting. `0`/`off`/`false` on its
+ *  `stall.repeatThreshold` override => 0, which DISABLES the guard (no arming, no trips);
+ *  anything unparseable falls back to the default (fail-safe: keep the guard on rather than
+ *  silently off). Read per-call — cheap, and lets ops flip it without a redeploy. */
+export declare function stallThreshold(): number;
+/** Max characters of the stringified RESULT folded into the signature. Bounds the hash
+ *  input so a multi-MB tool result can't dominate CPU/memory — two results that agree up
+ *  to the cap are treated as identical (acceptable: a growing output that makes real
+ *  progress changes LENGTH or content within the cap on any normal turn). */
+export declare const RESULT_HASH_CAP_BYTES = 8192;
+export declare function isGuardedTool(toolName: string): boolean;
+/** The stable key for a call's input alone (used to arm/match a specific spinning call). */
+export declare function inputKeyOf(input: unknown): string;
+/** signature = hash(tool name + normalised input + CAPPED normalised output). The result
+ *  is LOAD-BEARING: it is what immunises polling (changing output → new signature → reset).
+ *  The output is capped to RESULT_HASH_CAP_BYTES before hashing so it can't blow up. */
+export declare function signatureOf(toolName: string, inputKey: string, output: unknown): string;
+interface CallRef {
+    readonly toolName: string;
+    readonly inputKey: string;
+}
+export interface StallState {
+    /** the turn this state belongs to; a change means a new wake → full reset. */
+    turnId: string | null;
+    /** signature of the last folded-in result, or null after a reset/trip. */
+    signature: string | null;
+    /** how many identical (tool,args,result) results in a row. */
+    count: number;
+    /** set once `count >= threshold`: the call the NEXT invocation is nudged for. */
+    armed: CallRef | null;
+    /** how many times THIS spinning call has already tripped — drives escalating wording. */
+    strikes: number;
+    /** the call the strike streak belongs to; a different call forgives the streak. */
+    strikeRef: CallRef | null;
+    /** callId → captured input, so `action.result` (which carries no input) can rejoin it. */
+    pending: Record<string, CallRef>;
+}
+/** `action.result` fold: rejoin the input, compute the signature, and inc/reset the
+ *  counter — arming once `threshold` identical results are seen. `threshold <= 0` never
+ *  arms (guard disabled). */
+export declare function reduceResult(state: StallState, turnId: string | null, callId: string, toolName: string, output: unknown, threshold: number): StallState;
+/** The model-visible nudge, escalating with the strike count (how many times this exact
+ *  call has already tripped this turn). Framing only — the audited result is never mutated. */
+export declare function stallNudge(toolName: string, strikes?: number): string;
+/** Hook seam (`actions.requested`). Fail-open outside a session context. */
+export declare function recordActionRequest(turnId: string | null, callId: string, toolName: string, input: unknown): void;
+/** Hook seam (`action.result`). Fail-open outside a session context. */
+export declare function recordActionResult(turnId: string | null, callId: string, toolName: string, output: unknown): void;
+/**
+ * Wrap a tool so an armed identical-spin call is nudged instead of executed. Used by
+ * the built-in overrides: `defineTool(withStallGuard("bash", bash))`.
+ *
+ * The nudge is surfaced by THROWING (a recoverable tool-error the model reads and
+ * continues from, exactly like agent/tools/reply.ts's unresolved-target throw) — NOT
+ * by returning a value (which would fail the tool's own outputSchema) and NOT via an
+ * `approval:` gate (a wrapped-tool approval registered at session.started doesn't
+ * replay-lookup on OE's resumed long-lived sessions and would kill the turn — see
+ * agent/tools/reply.ts:43). It is a per-ACTION failed result, never a turn abort — and
+ * the ACTUAL tool result is never mutated (the tool simply doesn't run this once).
+ */
+export declare function withStallGuard<I, O>(toolName: string, tool: ToolDefinition<I, O>): ToolDefinition<I, O>;
+export {};
+//# sourceMappingURL=guard.d.ts.map

package/dist/agent/stall/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../agent/stall/guard.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAe,cAAc,EAAE,MAAM,WAAW,CAAC;AAK7D;;sEAEsE;AACtE,eAAO,MAAM,uBAAuB,QAAyC,CAAC;AAE9E;;;qFAGqF;AACrF,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;6EAG6E;AAC7E,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAO1C,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvD;AAgBD,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD;AAED;;wFAEwF;AACxF,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAOvF;AAID,UAAU,OAAO;IACf,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACtB,yFAAyF;IACzF,OAAO,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,0FAA0F;IAC1F,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AA2BD;;6BAE6B;AAC7B,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,CAoBvJ;AAeD;+FAC+F;AAC/F,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,SAAI,GAAG,MAAM,CAoBhE;AAMD,4EAA4E;AAC5E,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAOjH;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAQjH;AAmBD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAuBvG"}

package/dist/agent/stall/guard.js

@@ -0,0 +1,248 @@
+// Within-loop STALL GUARD — detect when the agent is spinning (repeating the SAME
+// tool call with the SAME arguments AND the SAME result) and nudge the model to
+// break its own loop. Conservative by construction: it only ever surfaces a
+// model-visible message the model can act on; it never aborts, pauses, or rotates
+// the live turn (eve exposes no authored turn-abort API — hooks are observe-only;
+// see node_modules/eve/docs/guides/hooks.md).
+//
+// TWO SEAMS, split because of that constraint:
+//   • DETECTION runs in a hook (agent/hooks/stall-guard.ts) on `actions.requested`
+//     (to capture each call's input) + `action.result` (to fold the result in).
+//     The hook is UNIVERSAL — it accumulates for every tool, so a spin on any tool
+//     is observable via telemetry even where no wrapper intervenes.
+//   • INTERVENTION can only happen at the tool-execution boundary, so the wrapper
+//     (`withStallGuard`) is applied to the identical-result spin surface — the
+//     built-in shell/file/fetch tools (agent/tools/sandbox_tools.ts spreads+wraps
+//     bash/glob/grep/read_file/write_file/web_fetch).
+//
+// The signature folds the RESULT in on purpose: "same tool + same args" ALONE
+// false-positives on legitimate polling (a deploy-status `bash` loop, `check_pr_status`,
+// `read_thread` — identical args, CHANGING results). Including the normalised
+// result means a poll that returns new data never trips. The result is CAPPED to
+// RESULT_HASH_CAP_BYTES before hashing so a huge tool output can't blow up the signature.
+//
+// STATE IS PER-SESSION-TURN. `defineState` (eve/context) gives per-session isolation
+// (subagent sessions get FRESH state and their hooks don't fire in the parent, so a
+// per-session counter naturally excludes subagent fan-out); on top of that we key the
+// counter to the live `turnId` and RESET when it changes, so a spin can't carry across
+// separate wakes (identical call in two unrelated turns is not a loop). All reads/writes
+// are fail-open: outside a session context (sessionless schedules/evals) they no-op.
+import { createHash } from "node:crypto";
+import { defineState } from "eve/context";
+import { auditToolAction } from "../audit/tool-action.js";
+import { emitTelemetry } from "../observability/telemetry.js";
+import { SETTINGS, getSettings } from "../settings/settings.js";
+/** Default identical-(tool,args,result) run length before the NEXT identical call is
+ *  nudged instead of executed. Deliberately conservative. IS the schema's shipped default
+ *  (`stall.repeatThreshold`) — one source, not two that can drift. */
+export const DEFAULT_STALL_THRESHOLD = SETTINGS.stall.repeatThreshold.shipped;
+/** The configured threshold — the `stall.repeatThreshold` setting. `0`/`off`/`false` on its
+ *  `stall.repeatThreshold` override => 0, which DISABLES the guard (no arming, no trips);
+ *  anything unparseable falls back to the default (fail-safe: keep the guard on rather than
+ *  silently off). Read per-call — cheap, and lets ops flip it without a redeploy. */
+export function stallThreshold() {
+    return getSettings().stall.repeatThreshold;
+}
+/** Max characters of the stringified RESULT folded into the signature. Bounds the hash
+ *  input so a multi-MB tool result can't dominate CPU/memory — two results that agree up
+ *  to the cap are treated as identical (acceptable: a growing output that makes real
+ *  progress changes LENGTH or content within the cap on any normal turn). */
+export const RESULT_HASH_CAP_BYTES = 8192;
+/** Tools that are legitimately called repeatedly (conversational/terminal) or whose
+ *  re-dispatch must never break fan-out — never guarded. `agent` (subagent dispatch)
+ *  is out so a parent's fan-out is never mistaken for a stall. */
+const STALL_ALLOWLIST = new Set(["reply", "react", "no_reply", "agent"]);
+export function isGuardedTool(toolName) {
+    return !STALL_ALLOWLIST.has(toolName);
+}
+// --- signature -----------------------------------------------------------------
+/** Deterministic JSON: object keys sorted recursively so arg/result key-order can't
+ *  perturb the signature. `undefined` (missing input/output) normalises to "null". */
+function stableStringify(value) {
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value) ?? "null";
+    if (Array.isArray(value))
+        return `[${value.map(stableStringify).join(",")}]`;
+    const obj = value;
+    return `{${Object.keys(obj)
+        .sort()
+        .map((k) => `${JSON.stringify(k)}:${stableStringify(obj[k])}`)
+        .join(",")}}`;
+}
+/** The stable key for a call's input alone (used to arm/match a specific spinning call). */
+export function inputKeyOf(input) {
+    return stableStringify(input);
+}
+/** signature = hash(tool name + normalised input + CAPPED normalised output). The result
+ *  is LOAD-BEARING: it is what immunises polling (changing output → new signature → reset).
+ *  The output is capped to RESULT_HASH_CAP_BYTES before hashing so it can't blow up. */
+export function signatureOf(toolName, inputKey, output) {
+    const result = stableStringify(output);
+    const capped = result.length <= RESULT_HASH_CAP_BYTES ? result : result.slice(0, RESULT_HASH_CAP_BYTES);
+    // "\n" separator: collision-safe (tool names carry no newline; inputKey/capped are
+    // JSON.stringify output, which escapes any real newline to a literal "\n") and keeps
+    // this file plain text — the earlier "\0" separator made git treat it as binary.
+    return createHash("sha1").update(`${toolName}\n${inputKey}\n${capped}`).digest("hex");
+}
+function initialStallState() {
+    return { turnId: null, signature: null, count: 0, armed: null, strikes: 0, strikeRef: null, pending: {} };
+}
+/** Bound on in-flight callId→input entries (results normally consume them immediately;
+ *  this only matters if some call never yields a result). */
+const PENDING_CAP = 64;
+/** Reset the whole counter when the turn changes (a new wake is never a continuation of
+ *  the previous turn's loop). A null turnId (sessionless/tests) is treated as "same turn". */
+function reduceTurn(state, turnId) {
+    if (turnId === null || state.turnId === turnId)
+        return state;
+    return { ...initialStallState(), turnId, pending: state.pending };
+}
+/** `actions.requested` fold: stash the call's input keyed by callId for the result join. */
+function reduceRequest(state, turnId, callId, toolName, input) {
+    const s = reduceTurn(state, turnId);
+    if (!isGuardedTool(toolName))
+        return s;
+    const pending = { ...s.pending, [callId]: { toolName, inputKey: inputKeyOf(input) } };
+    const keys = Object.keys(pending);
+    if (keys.length > PENDING_CAP)
+        for (const k of keys.slice(0, keys.length - PENDING_CAP))
+            delete pending[k];
+    return { ...s, pending };
+}
+/** `action.result` fold: rejoin the input, compute the signature, and inc/reset the
+ *  counter — arming once `threshold` identical results are seen. `threshold <= 0` never
+ *  arms (guard disabled). */
+export function reduceResult(state, turnId, callId, toolName, output, threshold) {
+    const s = reduceTurn(state, turnId);
+    if (!isGuardedTool(toolName))
+        return s;
+    const inputKey = s.pending[callId]?.inputKey ?? inputKeyOf(undefined);
+    const pending = { ...s.pending };
+    delete pending[callId];
+    // The model doing a DIFFERENT call forgives the escalation streak (it moved on).
+    let strikes = s.strikes;
+    let strikeRef = s.strikeRef;
+    if (strikeRef && (strikeRef.toolName !== toolName || strikeRef.inputKey !== inputKey)) {
+        strikes = 0;
+        strikeRef = null;
+    }
+    const signature = signatureOf(toolName, inputKey, output);
+    if (signature === s.signature) {
+        const count = s.count + 1;
+        const armed = threshold > 0 && count >= threshold ? { toolName, inputKey } : s.armed;
+        return { ...s, signature, count, armed, strikes, strikeRef, pending };
+    }
+    return { ...s, signature, count: 1, armed: null, strikes, strikeRef, pending };
+}
+/** Wrapper decision: does THIS invocation match the armed spinning call? If so, trip
+ *  and reset the loop (so the nudge fires once per threshold, not every later call). The
+ *  strike count is bumped for the SAME call so continued looping escalates the wording. */
+function takeTrip(state, toolName, input) {
+    if (!isGuardedTool(toolName) || !state.armed)
+        return { tripped: false, strikes: 0, state };
+    const inputKey = inputKeyOf(input);
+    if (state.armed.toolName !== toolName || state.armed.inputKey !== inputKey)
+        return { tripped: false, strikes: 0, state };
+    const sameStreak = state.strikeRef?.toolName === toolName && state.strikeRef?.inputKey === inputKey;
+    const strikes = sameStreak ? state.strikes + 1 : 1;
+    const strikeRef = { toolName, inputKey };
+    return { tripped: true, strikes, state: { ...state, signature: null, count: 0, armed: null, strikes, strikeRef } };
+}
+/** The model-visible nudge, escalating with the strike count (how many times this exact
+ *  call has already tripped this turn). Framing only — the audited result is never mutated. */
+export function stallNudge(toolName, strikes = 1) {
+    const threshold = stallThreshold() || DEFAULT_STALL_THRESHOLD;
+    if (strikes <= 1) {
+        return (`You've called \`${toolName}\` with identical arguments and gotten an identical result ` +
+            `${threshold} times in a row. That loop isn't making progress — stop repeating it: ` +
+            `summarise what you already have, try a materially different approach, or ask for help.`);
+    }
+    if (strikes === 2) {
+        return (`You are STILL looping on \`${toolName}\` — identical call, identical result, and you were ` +
+            `already warned once. Do NOT call it the same way again. Change approach now, or tell the ` +
+            `user you're stuck and exactly what's blocking you.`);
+    }
+    return (`You are stuck in a loop on \`${toolName}\` and have ignored ${strikes - 1} warnings. Stop ` +
+        `calling it. Report to the user that you cannot make progress and what you were trying to do.`);
+}
+// --- durable facade -------------------------------------------------------------
+const stallSlot = defineState("open-everywhere.stall-guard", initialStallState);
+/** Hook seam (`actions.requested`). Fail-open outside a session context. */
+export function recordActionRequest(turnId, callId, toolName, input) {
+    if (stallThreshold() <= 0)
+        return;
+    try {
+        stallSlot.update((s) => reduceRequest(s, turnId, callId, toolName, input));
+    }
+    catch {
+        /* no session context — best-effort */
+    }
+}
+/** Hook seam (`action.result`). Fail-open outside a session context. */
+export function recordActionResult(turnId, callId, toolName, output) {
+    const threshold = stallThreshold();
+    if (threshold <= 0)
+        return;
+    try {
+        stallSlot.update((s) => reduceResult(s, turnId, callId, toolName, output, threshold));
+    }
+    catch {
+        /* no session context — best-effort */
+    }
+}
+function consumeTrip(toolName, input) {
+    if (stallThreshold() <= 0)
+        return { tripped: false, strikes: 0 };
+    try {
+        let tripped = false;
+        let strikes = 0;
+        stallSlot.update((s) => {
+            const r = takeTrip(s, toolName, input);
+            tripped = r.tripped;
+            strikes = r.strikes;
+            return r.state;
+        });
+        return { tripped, strikes };
+    }
+    catch {
+        return { tripped: false, strikes: 0 }; // no session context — never intervene
+    }
+}
+/**
+ * Wrap a tool so an armed identical-spin call is nudged instead of executed. Used by
+ * the built-in overrides: `defineTool(withStallGuard("bash", bash))`.
+ *
+ * The nudge is surfaced by THROWING (a recoverable tool-error the model reads and
+ * continues from, exactly like agent/tools/reply.ts's unresolved-target throw) — NOT
+ * by returning a value (which would fail the tool's own outputSchema) and NOT via an
+ * `approval:` gate (a wrapped-tool approval registered at session.started doesn't
+ * replay-lookup on OE's resumed long-lived sessions and would kill the turn — see
+ * agent/tools/reply.ts:43). It is a per-ACTION failed result, never a turn abort — and
+ * the ACTUAL tool result is never mutated (the tool simply doesn't run this once).
+ */
+export function withStallGuard(toolName, tool) {
+    if (!isGuardedTool(toolName))
+        return tool;
+    return {
+        ...tool,
+        // NOT async, deliberately: an async wrapper re-wraps a streaming tool AsyncIterable result in a
+        // Promise, a shape eve does not accept. The pass-through hands back the tool own return value
+        // untouched; only the nudge path, which always throws, needs a promise.
+        execute(input, ctx) {
+            const { tripped, strikes } = consumeTrip(toolName, input);
+            if (tripped) {
+                return (async () => {
+                    // Observable trip signal — reuses the closed-vocabulary `oe.feature.used` event
+                    // (observability/telemetry.ts) so we can see whether the guard ever fires, and an
+                    // append-only AUDIT row (action "stall.nudge") so a prod loop is queryable per-org.
+                    emitTelemetry("oe.feature.used", { "oe.feature": "stall_guard", "oe.outcome": "tripped" });
+                    await auditToolAction(ctx, "stall.nudge", { tool: toolName, threshold: stallThreshold(), strikes });
+                    console.warn(`[open-everywhere:stall-guard] nudged "${toolName}" after ${stallThreshold()} identical calls (strike ${strikes})`);
+                    throw new Error(stallNudge(toolName, strikes));
+                })();
+            }
+            return tool.execute(input, ctx);
+        },
+    };
+}
+//# sourceMappingURL=guard.js.map

package/dist/agent/stall/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../agent/stall/guard.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,gFAAgF;AAChF,4EAA4E;AAC5E,kFAAkF;AAClF,kFAAkF;AAClF,8CAA8C;AAC9C,EAAE;AACF,+CAA+C;AAC/C,mFAAmF;AACnF,gFAAgF;AAChF,mFAAmF;AACnF,oEAAoE;AACpE,kFAAkF;AAClF,+EAA+E;AAC/E,kFAAkF;AAClF,sDAAsD;AACtD,EAAE;AACF,8EAA8E;AAC9E,yFAAyF;AACzF,8EAA8E;AAC9E,iFAAiF;AACjF,0FAA0F;AAC1F,EAAE;AACF,qFAAqF;AACrF,oFAAoF;AACpF,sFAAsF;AACtF,uFAAuF;AACvF,yFAAyF;AACzF,qFAAqF;AAErF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;sEAEsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC;AAE9E;;;qFAGqF;AACrF,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;AAC7C,CAAC;AAED;;;6EAG6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAE1C;;kEAEkE;AAClE,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAE9F,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,kFAAkF;AAElF;sFACsF;AACtF,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7E,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACxB,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;wFAEwF;AACxF,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,QAAgB,EAAE,MAAe;IAC7E,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACxG,mFAAmF;IACnF,qFAAqF;IACrF,iFAAiF;IACjF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,KAAK,QAAQ,KAAK,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxF,CAAC;AA0BD,SAAS,iBAAiB;IACxB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC5G,CAAC;AAED;6DAC6D;AAC7D,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB;8FAC8F;AAC9F,SAAS,UAAU,CAAC,KAAiB,EAAE,MAAqB;IAC1D,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,EAAE,GAAG,iBAAiB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;AACpE,CAAC;AAED,4FAA4F;AAC5F,SAAS,aAAa,CAAC,KAAiB,EAAE,MAAqB,EAAE,MAAc,EAAE,QAAgB,EAAE,KAAc;IAC/G,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAA4B,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC/G,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW;QAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC;YAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3G,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;6BAE6B;AAC7B,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,MAAqB,EAAE,MAAc,EAAE,QAAgB,EAAE,MAAe,EAAE,SAAiB;IACzI,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACjC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IACvB,iFAAiF;IACjF,IAAI,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IACxB,IAAI,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IAC5B,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtF,OAAO,GAAG,CAAC,CAAC;QACZ,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,SAAS,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,IAAI,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACrF,OAAO,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACjF,CAAC;AAED;;2FAE2F;AAC3F,SAAS,QAAQ,CAAC,KAAiB,EAAE,QAAgB,EAAE,KAAc;IACnE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IAC3F,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IACzH,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,EAAE,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,QAAQ,KAAK,QAAQ,CAAC;IACpG,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,SAAS,GAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;AACrH,CAAC;AAED;+FAC+F;AAC/F,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,OAAO,GAAG,CAAC;IACtD,MAAM,SAAS,GAAG,cAAc,EAAE,IAAI,uBAAuB,CAAC;IAC9D,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,OAAO,CACL,mBAAmB,QAAQ,6DAA6D;YACxF,GAAG,SAAS,wEAAwE;YACpF,wFAAwF,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO,CACL,8BAA8B,QAAQ,sDAAsD;YAC5F,2FAA2F;YAC3F,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,CACL,gCAAgC,QAAQ,uBAAuB,OAAO,GAAG,CAAC,kBAAkB;QAC5F,8FAA8F,CAC/F,CAAC;AACJ,CAAC;AAED,mFAAmF;AAEnF,MAAM,SAAS,GAAG,WAAW,CAAa,6BAA6B,EAAE,iBAAiB,CAAC,CAAC;AAE5F,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,MAAqB,EAAE,MAAc,EAAE,QAAgB,EAAE,KAAc;IACzG,IAAI,cAAc,EAAE,IAAI,CAAC;QAAE,OAAO;IAClC,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,MAAqB,EAAE,MAAc,EAAE,QAAgB,EAAE,MAAe;IACzG,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;IACnC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO;IAC3B,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAc;IACnD,IAAI,cAAc,EAAE,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjE,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACrB,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YACpB,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YACpB,OAAO,CAAC,CAAC,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,uCAAuC;IAChF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAO,QAAgB,EAAE,IAA0B;IAC/E,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO;QACL,GAAG,IAAI;QACP,gGAAgG;QAChG,8FAA8F;QAC9F,wEAAwE;QACxE,OAAO,CAAC,KAAQ,EAAE,GAAgB;YAChC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,IAAoB,EAAE;oBACjC,gFAAgF;oBAChF,kFAAkF;oBAClF,oFAAoF;oBACpF,aAAa,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;oBAC3F,MAAM,eAAe,CAAC,GAAG,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;oBACpG,OAAO,CAAC,IAAI,CAAC,yCAAyC,QAAQ,WAAW,cAAc,EAAE,4BAA4B,OAAO,GAAG,CAAC,CAAC;oBACjI,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;gBACjD,CAAC,CAAC,EAAE,CAAC;YACP,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/agent/status/status.d.ts

@@ -0,0 +1,32 @@
+export type WorkState = "working" | "done" | "needs_input" | "blocked";
+/** The reactions the BOT sets (see header — humans own ✅). */
+export declare const STATUS_REACTION: {
+    readonly working: "eyes";
+    readonly blocked: "octagonal_sign";
+};
+export type ReactionState = keyof typeof STATUS_REACTION;
+export declare const ALL_STATUS_REACTIONS: readonly string[];
+export declare const STOP_HAND_SLACK_NAME = "raised_hand";
+export declare const STOP_HAND_UNICODE = "\u270B";
+export declare const PINNED_HEADER = "*Open Everywhere \u2014 current work*";
+export declare const PINNED_HEADERS: readonly string[];
+/** Is this message text one of our own pinned status messages (any era)? */
+export declare function isPinnedStatusMessage(text: string): boolean;
+/** One STATUS.md bullet for a work item, keyed by id (e.g. the session id). */
+export declare function statusItemLine(id: string, state: WorkState, summary: string, whenISO: string): string;
+/**
+ * Upsert (or remove, when `line` is null) a status item keyed by `id` in a
+ * STATUS.md body. Items are flat bullets; the keyed bullet is replaced in place
+ * (preserving order) or appended. Returns the new body.
+ */
+export declare function upsertStatusItem(body: string | undefined, id: string, line: string | null): string;
+/** Extract the current item bullets from a STATUS.md body. */
+export declare function statusItems(body: string | undefined): string[];
+/**
+ * Render the pinned status message (Slack mrkdwn) from a STATUS.md body. Leads
+ * with PINNED_HEADER (the find marker); shows `_(idle)_` when nothing is active.
+ */
+export declare function renderPinned(body: string | undefined): string;
+/** Seed header for a fresh surface STATUS.md. */
+export declare function statusSeed(surfaceKey: string): string;
+//# sourceMappingURL=status.d.ts.map

package/dist/agent/status/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../agent/status/status.ts"],"names":[],"mappings":"AAoBA,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;AAEvE,8DAA8D;AAC9D,eAAO,MAAM,eAAe;aAC1B,OAAO,EAAE,MAAM;aACf,OAAO,EAAE,gBAAgB;CACjB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,eAAe,CAAC;AACzD,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAAmC,CAAC;AAiBtF,eAAO,MAAM,oBAAoB,gBAAgB,CAAC;AAClD,eAAO,MAAM,iBAAiB,WAAM,CAAC;AAYrC,eAAO,MAAM,aAAa,0CAAqC,CAAC;AAKhE,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAAuD,CAAC;AAEpG,4EAA4E;AAC5E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAUD,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAErG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAoBlG;AAED,8DAA8D;AAC9D,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAE9D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAG7D;AAED,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAErD"}

package/dist/agent/status/status.js

@@ -0,0 +1,116 @@
+// Status UX core (originally Thariq best-practices §11; reaction scheme redesigned
+// 2026-07-03, Tommy) — pure, unit-tested. Two glanceable surfaces, both fed from here:
+//
+//  1. Status-emoji REACTIONS on a thread's root message — deliberately NARROW:
+//     👀 = "seen, working on it" (added at pickup, REMOVED when the turn ends — absence
+//     is the done signal; the posted reply is the result). 🛑 = failed. That's the whole
+//     bot vocabulary: ✅ is the HUMANS' mark (Claude Tag's own docs teach "react ✅ to
+//     anything you consider done" and routines read it as a skip signal — the bot must
+//     not squat on it), and there's no ❓ (durable sessions PARK after every turn, so
+//     "waiting" is the steady state, not a question; when the agent genuinely needs
+//     input, the HITL approval blocks it posts are already loud).
+//
+//  2. A self-maintained PINNED status message listing all of OpenEverywhere's in-flight
+//     work ACROSS threads. Threads are isolated sessions, so the shared substrate
+//     is **surface-tier memory** (every thread in a surface shares it): each
+//     session upserts its line into a STATUS.md there (the `update_status` tool),
+//     and the Slack channel renders + pins it. This module owns the STATUS.md
+//     format + render; the Slack I/O is in agent/channels/slack.ts. The dashboard
+//     keeps the richer four-state vocabulary (it's a written report, not a reaction).
+/** The reactions the BOT sets (see header — humans own ✅). */
+export const STATUS_REACTION = {
+    working: "eyes",
+    blocked: "octagonal_sign",
+};
+export const ALL_STATUS_REACTIONS = Object.values(STATUS_REACTION);
+// --- ✋ the STOP affordance (OPE-418) -------------------------------------------------------
+//
+// 🔴 ITS OWN CONSTANT, DELIBERATELY OUTSIDE `STATUS_REACTION`. That map is consumed by a loop
+// (providers/slack channels/slack.ts setStatusReaction) which REMOVES every member that isn't the
+// requested state — so joining it would make ✋ and 👀 evict each other on every transition. ✋ is
+// ADDITIVE: it coexists with whatever else is on the message and has its own add/remove call.
+//
+// 🔴 NOT 🛑. `octagonal_sign` is already the bot's `blocked` marker above; reusing it would make
+// "this turn failed" and "you can stop this turn" the same glyph.
+//
+// It means ONE thing: a turn on this thread has kicked off real work and can be stopped. The host
+// places and removes it — never the model. The model forgetting to set it would remove the stop
+// button, and the trigger has to match a KNOWN glyph, so it cannot be a matter of judgement. (The
+// EXPRESSIVE reactions — 👀 seen, ✅ done — are the agent's own call; the split is: the agent owns
+// everything expressive, the host owns only what a mechanism depends on.)
+export const STOP_HAND_SLACK_NAME = "raised_hand";
+export const STOP_HAND_UNICODE = "✋";
+// Unicode icons used in the written STATUS.md / pinned message (Slack renders these).
+const ICON = {
+    working: "⏳",
+    done: "✅",
+    needs_input: "❓",
+    blocked: "🛑",
+};
+// Stable marker so the channel can find its own pinned message via pins.list
+// without persisting a message ts across sessions.
+export const PINNED_HEADER = "*Open Everywhere — current work*";
+// Every header we've ever rendered — MATCHING must accept all of them, or a pin posted
+// under an old header stops being recognised as ours (it would get re-posted AND adopted
+// as pinned "instructions" by onboarding). Rendering always uses PINNED_HEADER.
+export const PINNED_HEADERS = [PINNED_HEADER, "*OpenEverywhere — current work*"];
+/** Is this message text one of our own pinned status messages (any era)? */
+export function isPinnedStatusMessage(text) {
+    return PINNED_HEADERS.some((h) => text.startsWith(h));
+}
+function isItem(line) {
+    return line.startsWith("- ");
+}
+function idOf(line) {
+    const m = line.match(/`([^`]+)`/);
+    return m ? m[1] : null;
+}
+/** One STATUS.md bullet for a work item, keyed by id (e.g. the session id). */
+export function statusItemLine(id, state, summary, whenISO) {
+    return `- ${ICON[state]} ${summary.trim().replace(/\s+/g, " ")} · \`${id}\` · ${whenISO}`;
+}
+/**
+ * Upsert (or remove, when `line` is null) a status item keyed by `id` in a
+ * STATUS.md body. Items are flat bullets; the keyed bullet is replaced in place
+ * (preserving order) or appended. Returns the new body.
+ */
+export function upsertStatusItem(body, id, line) {
+    const lines = (body ?? "").split("\n");
+    const out = [];
+    let replaced = false;
+    for (const l of lines) {
+        if (isItem(l) && idOf(l) === id) {
+            if (line) {
+                out.push(line);
+                replaced = true;
+            }
+            // else: drop it (removal)
+        }
+        else {
+            out.push(l);
+        }
+    }
+    if (line && !replaced) {
+        if (out.length && out[out.length - 1] !== "")
+            out.push("");
+        out.push(line);
+    }
+    return out.join("\n").replace(/\n{3,}/g, "\n\n").trim() + "\n";
+}
+/** Extract the current item bullets from a STATUS.md body. */
+export function statusItems(body) {
+    return (body ?? "").split("\n").filter(isItem);
+}
+/**
+ * Render the pinned status message (Slack mrkdwn) from a STATUS.md body. Leads
+ * with PINNED_HEADER (the find marker); shows `_(idle)_` when nothing is active.
+ */
+export function renderPinned(body) {
+    const items = statusItems(body);
+    return items.length ? `${PINNED_HEADER}\n${items.join("\n")}` : `${PINNED_HEADER}\n_(idle)_`;
+}
+/** Seed header for a fresh surface STATUS.md. */
+export function statusSeed(surfaceKey) {
+    return `# Status — ${surfaceKey}\n\nOpen Everywhere's in-flight work on this surface (one line per thread). Maintained by the \`update_status\` tool; mirrored to a pinned Slack message.\n`;
+}
+//# sourceMappingURL=status.js.map

package/dist/agent/status/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../agent/status/status.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,uFAAuF;AACvF,EAAE;AACF,+EAA+E;AAC/E,wFAAwF;AACxF,yFAAyF;AACzF,qFAAqF;AACrF,uFAAuF;AACvF,qFAAqF;AACrF,oFAAoF;AACpF,kEAAkE;AAClE,EAAE;AACF,wFAAwF;AACxF,kFAAkF;AAClF,6EAA6E;AAC7E,kFAAkF;AAClF,8EAA8E;AAC9E,kFAAkF;AAClF,sFAAsF;AAItF,8DAA8D;AAC9D,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,gBAAgB;CACjB,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAsB,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAEtF,8FAA8F;AAC9F,EAAE;AACF,8FAA8F;AAC9F,kGAAkG;AAClG,iGAAiG;AACjG,8FAA8F;AAC9F,EAAE;AACF,iGAAiG;AACjG,kEAAkE;AAClE,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,kGAAkG;AAClG,kGAAkG;AAClG,0EAA0E;AAC1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAClD,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,sFAAsF;AACtF,MAAM,IAAI,GAA8B;IACtC,OAAO,EAAE,GAAG;IACZ,IAAI,EAAE,GAAG;IACT,WAAW,EAAE,GAAG;IAChB,OAAO,EAAE,IAAI;CACd,CAAC;AAEF,6EAA6E;AAC7E,mDAAmD;AACnD,MAAM,CAAC,MAAM,aAAa,GAAG,kCAAkC,CAAC;AAEhE,uFAAuF;AACvF,yFAAyF;AACzF,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAsB,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;AAEpG,4EAA4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AACD,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,KAAgB,EAAE,OAAe,EAAE,OAAe;IAC3F,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,OAAO,EAAE,CAAC;AAC5F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAwB,EAAE,EAAU,EAAE,IAAmB;IACxF,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAChC,IAAI,IAAI,EAAE,CAAC;gBACT,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACf,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;YACD,0BAA0B;QAC5B,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC;AACjE,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,WAAW,CAAC,IAAwB;IAClD,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAwB;IACnD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,aAAa,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,aAAa,YAAY,CAAC;AAC/F,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,OAAO,cAAc,UAAU,6JAA6J,CAAC;AAC/L,CAAC"}

package/dist/agent/subagents/contracts.d.ts

@@ -0,0 +1,82 @@
+import { z } from "zod";
+type JsonObject = Record<string, unknown>;
+type StandardResult<T> = {
+    readonly value: T;
+    readonly issues?: undefined;
+} | {
+    readonly issues: readonly {
+        readonly message: string;
+    }[];
+};
+/** A Standard JSON Schema — the shape eve's `defineAgent({ outputSchema })` accepts and lowers with `jsonSchema.output`. */
+export interface ModelFacingOutputSchema<T> {
+    readonly "~standard": {
+        readonly version: 1;
+        readonly vendor: string;
+        readonly validate: (value: unknown) => StandardResult<T> | Promise<StandardResult<T>>;
+        readonly jsonSchema: {
+            readonly input: (options: {
+                readonly target: string;
+            }) => JsonObject;
+            readonly output: (options: {
+                readonly target: string;
+            }) => JsonObject;
+        };
+        readonly types?: {
+            readonly input: unknown;
+            readonly output: T;
+        } | undefined;
+    };
+}
+/** A declared subagent's contract, in the form its `agent.ts` binds as `outputSchema`: every optional field is nullable in the JSON Schema the model sees, and `validate` removes those nulls before the contract validates. */
+export declare function modelFacingOutputSchema<T extends z.ZodType>(contract: T): ModelFacingOutputSchema<z.output<T>>;
+/** Severity ladder for a review finding. `nit` is deliberately part of the same scale so a reviewer
+ *  can approve WITH nits rather than inflating them to justify a block. */
+export declare const REVIEW_SEVERITY: readonly ["critical", "high", "medium", "low", "nit"];
+/** What KIND of problem a finding is. Closed set so findings are groupable across reviews. */
+export declare const REVIEW_CATEGORY: readonly ["security", "access-control", "correctness", "data-loss", "performance", "maintainability", "tests", "docs"];
+/**
+ * `fresh_eyes_review` — an independent second pass over a proposed change.
+ *
+ * FAIL-CLOSED FIELD: `evidenceSeen`. The subagent sees nothing but the caller's `message` (eve's
+ * isolation boundary — no inherited tools, no shared sandbox, no parent history), so "the caller
+ * pasted no actual change" is a state it can and must report. Its instructions require
+ * `recommendation: "block"` whenever `evidenceSeen` is false: silence about a change you were never
+ * shown must never read as approval.
+ */
+export declare const FRESH_EYES_REVIEW_OUTPUT: z.ZodObject<{
+    recommendation: z.ZodEnum<{
+        approve: "approve";
+        block: "block";
+    }>;
+    summary: z.ZodString;
+    evidenceSeen: z.ZodBoolean;
+    findings: z.ZodArray<z.ZodObject<{
+        severity: z.ZodEnum<{
+            critical: "critical";
+            high: "high";
+            low: "low";
+            medium: "medium";
+            nit: "nit";
+        }>;
+        category: z.ZodEnum<{
+            "access-control": "access-control";
+            correctness: "correctness";
+            "data-loss": "data-loss";
+            docs: "docs";
+            maintainability: "maintainability";
+            performance: "performance";
+            security: "security";
+            tests: "tests";
+        }>;
+        title: z.ZodString;
+        detail: z.ZodString;
+        location: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    meaning: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        subject: z.ZodString;
+        says: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export {};
+//# sourceMappingURL=contracts.d.ts.map

package/dist/agent/subagents/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../../agent/subagents/contracts.ts"],"names":[],"mappings":"AAkCA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC1C,KAAK,cAAc,CAAC,CAAC,IAAI;IAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,CAAC;AAE3I,4HAA4H;AAC5H,MAAM,WAAW,uBAAuB,CAAC,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,QAAQ,CAAC,UAAU,EAAE;YACnB,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE;gBAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;aAAE,KAAK,UAAU,CAAC;YACrE,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;gBAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;aAAE,KAAK,UAAU,CAAC;SACvE,CAAC;QACF,QAAQ,CAAC,KAAK,CAAC,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;YAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;SAAE,GAAG,SAAS,CAAC;KAC9E,CAAC;CACH;AAOD,gOAAgO;AAChO,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAgB9G;AAED;2EAC2E;AAC3E,eAAO,MAAM,eAAe,YAAI,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAU,CAAC;AAErF,8FAA8F;AAC9F,eAAO,MAAM,eAAe,YAC1B,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,OAAO,EACP,MAAM,CACE,CAAC;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsCnC,CAAC"}